Getting started with the site map - Port Swigger
Summary: PortSwigger's tutorial describes the Target > Site map tab in Burp Suite, a hierarchical tree that Burp populates automatically from sites visited through Burp's browser and from sources such as Burp Scanner. The tutorial walks through expanding a deliberately vulnerable lab site, noting that grayed-out items are predicted URLs the browser has not yet completed a request-response cycle for, and shows how to add a top-level node to scope, remove the /resources/images directory from scope, and delete unwanted items.
Key Takeaway: The site map fills itself from whatever you browse, so scope decisions made after the fact - like excluding /resources/images - determine which traffic Burp stops proxying and which hosts your testing actually covers.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026